News: 1764574208

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Web dev's crawler took down major online bookstore by buying too many books

(2025/12/01)


Who, Me? Thank you, dear reader, for tearing yourself away from Black Friday and Cyber Monday sales long enough to visit The Register , just in time for this fresh installment of Who, Me? It's the reader-contributed column in which we share your stories of unforced errors, and how you bounced back afterwards.

This week, meet a reader we'll Regomize as "Jim" who in the early 1990s worked for an online bookstore.*

"It was a startup when I worked there," Jim wrote, explaining that he helped to design and build the bookstore on Windows NT 4, Windows 2000 Server, Internet Information Server, and SQL Server. Those products supported a site structure that used subdomains for different types of products. Users could therefore visit books.bookstore.com to buy books, or video.bookstore.com to buy DVDs, and so on.

[1]

To keep the site humming, Jim would run a site crawler to find broken links, bad images, and even spelling errors.

[2]

[3]

His weapon of choice, [4]Microsoft Site Server , needed careful handling.

"I had to make sure that it did not click links that would add things to a shopping cart, as this would go into the 'shop' database with a cookie link to the 'user' and could cause problems, as the cart server would hold contents of the cart for 24 hours," Jim explained.

[5]

Jim made it work and thought little of it.

Then the company decided it had outgrown SQL Server and migrated to a new platform that would allow it to do accurate just-in-time inventory reporting. "It meant we could show the number of items in stock and how quickly we could deliver," Jim explained. "It was a very big deal at the company, because it put us ahead of our competitors."

To make this new platform work, the bookstore needed to change subdomains. So out went the old shop.bookstore.com and in came shoppingcart.bookstore.com.

[6]

Naturally, Jim added the new subdomain to the list of sites his crawler considered.

But he forgot to stop it clicking "add to cart" links.

The consequences of that omission became apparent when Jim's two-way pager interrupted his lunch.

The bookstore's VP of engineering asked Jim if he was scanning the site and, if so, could he stop it ASAP?

[7]Dev's last-day-of-contract code helped to crash app used by 350,000 people

[8]Developer made one wrong click and sent his AWS bill into the stratosphere

[9]Techie ran up $40,000 bill trying to download a driver

[10]'ERP down for emergency maintenance' was code for 'You deleted what?'

"I raced back to my desk and stopped the crawler," Jim told Who, Me? He soon saw that the phantom account the crawler used had thousands of books in its shopping cart.

Then the VP of engineering pointed out that Jim's colossal cart – which contained merchandise valued at more than $50,000 – somehow meant actual customers could not add items to their own carts, or check out and pay for products.

Jim raced to fix the problem, but it took 45 minutes before the site resumed normal operations.

This story has a happy ending as post-incident analysis showed two things.

One was that anybody who crawled shop.bookstore.com could create the same problem. So Jim had found a flaw worth fixing. The other was that most customers returned to complete their purchases once he fixed the problem. So Jim kept his job, and the bookstore operates to this day!

Have you made a mistake that halted the march of e-commerce or took down a website? If so, [11]click here to send an email to Who, Me? We consider every story that comes our way and handle them all with care, as we hope this week's installment demonstrates. ®

*It's the one that grew out of a bricks-and-mortar bookstore chain and has a name that sounds like a law firm, not the one named after a river.

Get our [12]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aS11TGjLUlrXFD3WcIR-bQAAAEY&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aS11TGjLUlrXFD3WcIR-bQAAAEY&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aS11TGjLUlrXFD3WcIR-bQAAAEY&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[4] https://en.wikipedia.org/wiki/Microsoft_Site_Server

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aS11TGjLUlrXFD3WcIR-bQAAAEY&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aS11TGjLUlrXFD3WcIR-bQAAAEY&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2025/11/24/who_me/

[8] https://www.theregister.com/2025/11/17/who_me/

[9] https://www.theregister.com/2025/11/10/who_me/

[10] https://www.theregister.com/2025/11/03/who_me/

[11] mailto:whome@theregister.com

[12] https://whitepapers.theregister.com/



UCAP

Sounds like Jim came very close to booking a trip to the job center.

Korev

Yeah, he was lucky not to be shelved

DJV

Indeed. That would have put him in a bind if he hadn't been the right type to fess up instead of cover up and fix the issue. People should definitely take a page out of his book!

Michael Hoffmann

This wouldn't have been a certain online bookstore that I frequented in the early/mid 90s?

Somewhat wonky website (weren't they all?), but a good way to get US books fairly cheaply from Europe.

They charged my CC twice once, and I wrote to customer support and got an email of apology and rectification, signed by "Jeff".

I never did find out whether they had more than one "Jeff" at that time.

Also wonder what became of them. Started with an "A". A-something.

Jamesit

The one I use for finding rare and hard to find books is alibris.com, has sellers from all over the world.

UCAP

Was it Andromeda?

Anonymous Coward

There's a footnote on the article:

"*It's the one that grew out of a bricks-and-mortar bookstore chain and has a name that sounds like a law firm, not the one named after a river"

So presumably Barnes & Noble

KarMann

Pretty sure they're talking about B&N, given the 'sounds like a law firm' footnote.

SVD_NL

Whenever something silly happens with computers, i try to take the skeuomorphisms 1 literally.

In this case it means watching some madman running across aisles, sweeping everything into a shopping cart, preventing anyone else from buying books.

1 Whenever computer terms and elements reflect their real-world counterpart, e.g. your desktop and recycle bin, or floppy disks for saving files.

Vivid Professional

I made a script on my website to run once an hour to collect any data on the Boeing 787's test flights. not wanting to wait an hour to see the results, I adjusted the parameters and sat back and watched as my webserver (shared hosting) went crazy and crashed.

instead of once an hour it tried to run the script once every 0.1 seconds.

i soon scrapped that idea never went back

Not Powell's then?

What? Me worry?

They had a web store in '94. The year before, you could email them your order. Convenient if you knew what it was you wanted, and then trundle over to the Technical Store by the Park Blocks. (Portland, Oregon USA for those not familiar with this PNW institution.) Loved the store, could care less for the tetchy cat. A few years later in my brief career as architect, I did design work for a quadrant of the City of Books block.

Never try to explain computers to a layman. It's easier to explain
sex to a virgin.
-- Robert Heinlein

(Note, however, that virgins tend to know a lot about computers.)